kernel: SCSI target (LIO) write to any block on ILO backstore

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

kernel: SCSI target (LIO) write to any block on ILO backstore

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

Amazon Linux 2 : kernel (ALAS-2021-1600)

The version of kernel installed on the remote host is prior to 4.14.219-161.340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1600 advisory. 2024-05-23: CVE-2023-1390 was added to this advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c...

Important: kernel

Issue Overview: A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel. There was a race problem in traceopen and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem DOS. This flaw could even allow a local attacker with special use...

Important: kernel-livepatch-4.14.209-160.339

Issue Overview: A flaw was found in the Linux kernel's implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to...

Important: kernel-livepatch-4.14.209-160.335

Issue Overview: A flaw was found in the Linux kernel's implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to...

Fedora 33 : tcmu-runner (2021-4a91649cf3)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-4a91649cf3 advisory. - In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote...

Fedora: Security Advisory for tcmu-runner (FEDORA-2021-4a91649cf3)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-4707-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4707-1 tcmu vulnerability

It was discovered that TCMU lacked a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request...

USN-4707-1: TCMU vulnerability

It was discovered that TCMU lacked a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request...

Ubuntu 20.04 LTS : TCMU vulnerability (USN-4707-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4707-1 advisory. It was discovered that TCMU lacked a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY...

openSUSE Security Update : tcmu-runner (openSUSE-2021-128)

This update for tcmu-runner fixes the following issue : - CVE-2021-3139: Fixed a LIO security issue bsc1180676. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : tcmu-runner (openSUSE-2021-97)

This update for tcmu-runner fixes the following issues : - CVE-2021-3139: Fixed a LIO security issue bsc1180676. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

OPENSUSE-SU-2021:0128-1 Security update for tcmu-runner

This update for tcmu-runner fixes the following issue: - CVE-2021-3139: Fixed a LIO security issue bsc1180676. This update was imported from the SUSE:SLE-15:Update update project...

Security update for tcmu-runner (important)

openSUSE Security Update: Security update for tcmu-runner Announcement ID: openSUSE-SU-2021:0128-1 Rating: important References: 1180676 Cross-References: CVE-2021-3139 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

SUSE SLES15 Security Update : tcmu-runner (SUSE-SU-2021:0158-1)

This update for tcmu-runner fixes the following issue : CVE-2021-3139: Fixed a LIO security issue bsc1180676. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as mu...

SUSE-SU-2021:0158-1 Security update for tcmu-runner

This update for tcmu-runner fixes the following issue: - CVE-2021-3139: Fixed a LIO security issue bsc1180676...

OPENSUSE-SU-2021:0097-1 Security update for tcmu-runner

This update for tcmu-runner fixes the following issues: - CVE-2021-3139: Fixed a LIO security issue bsc1180676. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for tcmu-runner (important)

openSUSE Security Update: Security update for tcmu-runner Announcement ID: openSUSE-SU-2021:0097-1 Rating: important References: 1180676 Cross-References: CVE-2021-3139 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...